And this is what I say, to do that you need to have control of the clients, just as I did write above.
In a company network with company rules ok. As an IPS not.
\
Use Splunk> to log/monitor your MikroTik Router(s).--> MikroTik->Splunk 
Backup config to Gmail -->Backup
Block users that tries too use non open ports -->Block